PT-2026-39023 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43362

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10

Description A flaw exists in the SMB client where the SMB2 write() function places the write payload in iov[1..n] as part of rq iov. Because smb3 init transform rq() pointer-shares rq iov, the crypt message() function encrypts iov[1] in-place, replacing plaintext with ciphertext. If a replayable error occurs, the retry process sends the already encrypted iov[1], leading to data corruption. This issue is most prevalent during unstable connections where reconnects trigger write retries. This affects SFU mknod and MF symlinks, and on versions prior to 6.10, sync writes were also affected.

Recommendations Update to Linux kernel version 6.10 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-43362

Affected Products

Linux Kernel

References · 16

• https://security-tracker.debian.org/tracker/CVE-2026-43362 · Vendor Advisory
• https://git.kernel.org/stable/c/92e64f1852f455f57d0850989e57c30d7fac7d95 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43362 · Vendor Advisory
• https://git.kernel.org/stable/c/438e77435aee2894d5edf90be5c87004a57f6258 · Patch
• https://git.kernel.org/stable/c/52327268224fb9ccc7ecfbbdfdfff54b6e93c518 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43362 · Security Note
• https://git.kernel.org/stable/c/aea5e37388a080361110ab5790f57ae0af383650 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43362 · Vendor Advisory
• https://git.kernel.org/stable/c/d78840a6a38d312dc1a51a65317bb67e46f0b929 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43362 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43362 · Security Note
• https://ubuntu.com/security/CVE-2026-43362 · Vendor Advisory
• https://git.kernel.org/linus/d78840a6a38d312dc1a51a65317bb67e46f0b929 · Note
• https://twitter.com/CVEnew/status/2052811008792502298 · Twitter Post
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post